CLAIMS 



What is claimed is: 

1 . A method for controlling an external storage device connected to a computer; the method 
comprising the steps of: 

accepting an operation by a user and issuing an ejection request to the external storage device 
connected to the computer in accordance with specifications specifying that software control should 
be performed, including processing to stop access to the device, when ejection is performed; and 

reading and encrypting a predetermined data file stored in the external storage device and storing 
the data file in the external storage device, if the ejection request has been issued. 

2. The method according to claim 1 , wherein the method is affixed in a machine readable 
program. 

3. A method for controlling an external storage device connected to a computer; the method 
comprising the steps of: 

detecting that the external storage device is connected to the computer and checking whether or 
not an encrypted data file is stored in the external storage device; and 

if an encrypted data file is stored in the external storage device, reading the encrypted data file, 
decrypting the encrypted data file using a passphrase preset and held by predetermined storage 
means, and storing the decrypted data file in the external storage device. 

4. The method according to claim 3, wherein the method is affixed in a machine readable 
program 

5. A program for controlling a computer to provide encryption processing for a data file stored 
in an external storage device connected to the computer; the program causing the computer to 
function as: 



JP920020248US2 



17 



acceptance means for accepting an ejection request to the external storage device connected to 
the computer in accordance with specifications specifying that software control should be 
performed, including processing to stop access to the device, when ejection is performed; and 

encryption means for encrypting a predetermined data file stored in the external storage device if 
the ejection request has been accepted by the acceptance means. 

6. The program according to Claim 5, further causing the computer to function as decryption 
means for detecting that the external storage device is connected to the computer and decrypting 
the encrypted data file stored in the external storage device. 

7. The program according to Claim 5, further causing the computer to function as passphrase 
managing means for managing a passphrase used for encryption by the encryption means and 
decryption by the decryption means. 

8. The method according to claim 5, wherein the method is affixed in a machine readable 
program. 

9. The method according to claim 7, wherein the method is affixed in a machine readable 
program. 

10. A program for controlling a computer to provide encryption processing for a data file stored 
in an external storage device connected to the computer; the program causing the computer to 
execute the processes of: 

detecting that the external storage device is connected to the computer and checking whether or 
not an encrypted data file is stored in the external storage device; and 

if an encrypted data file is stored in the external storage device, reading the encrypted data file, 
decrypting the encrypted data file using a passphrase preset and held by predetermined storage 
means, and storing the decrypted data file in the external storage device. 

1 1 . The program according to claim 10, wherein said program is resident on a computer. 
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12. The program according to claim 10, wherein said program is an application reasident 
a server. 
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